$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa File: M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa (raw, json) Hash identifier: k2csM76iOEYYvfJGPWNSWBC1tV/ZABiRppSh9tx3Xnc= Subject key identifier: 33:E2:6D:AA:FB:D7:2B:83:C4:04:9E:24:F9:3E:F1:44:E6:B4:1C:8E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1851 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa Signing time: Fri 17 Jan 2025 01:24:54 +0000 ROA not before: Fri 17 Jan 2025 01:24:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.6.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6225 (0x1851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=33E26DAAFBD72B83C4049E24F93EF144E6B41C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:71:cc:4a:3f:04:d0:d1:d7:93:8a:59:e2: fa:56:2c:a6:22:49:a8:45:e8:8d:42:8b:06:27:ce: 1f:ab:53:3b:ae:2a:18:49:16:d2:2d:ea:8a:19:c4: 6f:6e:16:ef:17:83:7b:93:cb:ee:e5:2e:29:7c:71: 6f:16:6e:12:22:80:a3:fd:3d:fa:04:60:1c:ce:0d: f9:cb:24:ad:0b:0e:12:2c:7a:a5:4d:b4:6d:7b:d6: 14:71:03:d2:14:8f:2d:07:4e:c8:2f:c5:bd:f0:f5: 85:68:fd:e2:2b:7a:8f:9d:ab:2a:91:c7:ab:58:bd: 81:f0:47:a5:71:ec:d9:3f:e7:32:26:57:9b:59:24: df:7e:18:ce:9e:2b:f2:21:00:e7:30:97:6e:d8:76: 5d:85:50:27:55:a7:72:4c:5f:e9:74:f5:0c:7a:e5: c3:f0:c6:6d:38:57:59:2c:8f:e4:01:d5:ea:b3:b6: ed:9e:b9:ba:6d:69:4b:19:f2:08:83:39:cc:89:b6: 88:a3:49:22:f7:11:c0:de:b8:06:37:e6:da:3a:c1: f4:c7:eb:0d:29:c6:25:ec:69:e0:6f:d7:20:ae:29: 38:b2:df:a8:a9:00:68:8e:76:d5:ca:3b:35:ed:57: 34:0e:fd:2c:68:31:b7:85:73:fc:95:2b:d4:0f:fd: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E2:6D:AA:FB:D7:2B:83:C4:04:9E:24:F9:3E:F1:44:E6:B4:1C:8E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:d5:84:2f:d4:2a:8e:65:32:53:2a:18:09:9a:ba:d8:9e:cd: 98:ee:d0:56:eb:e0:a2:05:ad:d3:aa:13:a8:fb:1f:1b:0c:be: b0:c8:da:3f:a3:3c:45:87:ea:19:eb:22:82:bf:f3:63:16:e3: e0:81:ad:b8:91:7f:e2:92:9d:06:21:35:70:7e:1c:8b:14:9b: c8:fb:e1:b7:ae:da:fe:e4:2c:e8:db:8e:87:42:e7:35:8f:06: 61:24:1e:71:31:61:ea:3a:43:a6:92:e3:0d:32:f1:c5:a8:62: c9:4a:85:37:e2:fd:a6:57:96:d6:cc:28:48:5a:e6:d1:93:bd: b9:fb:ac:b6:5d:8a:54:78:1a:63:c6:34:13:fd:5a:75:33:9e: 26:5a:b4:11:45:10:7c:fe:d3:94:da:46:14:e0:ad:e7:19:ea: fb:5d:d6:0f:a1:81:e5:66:6c:76:0f:b5:f2:ae:8a:cb:a8:e4: 5e:d6:45:92:44:cd:f8:e1:dd:34:31:03:9a:16:ad:c8:cd:0c: 33:02:4b:0d:87:29:3d:2a:10:3a:e5:32:09:e0:63:cf:e6:17: 8b:ed:e0:d5:19:4a:50:45:d7:a6:e9:9e:63:81:bb:7e:1d:0e: 93:4d:ac:b9:9a:6c:20:b5:84:af:a4:ba:da:24:bd:f3:31:70: e7:a1:4a:f1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMzRTI2REFBRkJENzJC ODNDNDA0OUUyNEY5M0VGMTQ0RTZCNDFDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiH3HMSj8E0NHXk4pZ4vpWLKYiSahF6I1CiwYnzh+rUzuuKhhJ FtIt6ooZxG9uFu8Xg3uTy+7lLil8cW8WbhIigKP9PfoEYBzODfnLJK0LDhIseqVN tG171hRxA9IUjy0HTsgvxb3w9YVo/eIreo+dqyqRx6tYvYHwR6Vx7Nk/5zImV5tZ JN9+GM6eK/IhAOcwl27Ydl2FUCdVp3JMX+l09Qx65cPwxm04V1ksj+QB1eqztu2e ubptaUsZ8giDOcyJtoijSSL3EcDeuAY35to6wfTH6w0pxiXsaeBv1yCuKTiy36ip AGiOdtXKOzXtVzQO/SxoMbeFc/yVK9QP/YwFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUM+JtqvvXK4PEBJ4k+T7xROa0HI4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L00tSnRxdnZYSzRQRUJK NGstVDd4Uk9hMEhJNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBmwwDQYJKoZIhvcNAQELBQADggEBAD7VhC/UKo5lMlMqGAmautiezZju0Fbr 4KIFrdOqE6j7HxsMvrDI2j+jPEWH6hnrIoK/82MW4+CBrbiRf+KSnQYhNXB+HIsU m8j74beu2v7kLOjbjodC5zWPBmEkHnExYeo6Q6aS4w0y8cWoYslKhTfi/aZXltbM KEha5tGTvbn7rLZdilR4GmPGNBP9WnUzniZatBFFEHz+05TaRhTgrecZ6vtd1g+h geVmbHYPtfKuisuo5F7WRZJEzfjh3TQxA5oWrcjNDDMCSw2HKT0qEDrlMgngY8/m F4vt4NUZSlBF16bpnmOBu34dDpNNrLmabCC1hK+kutokvfMxcOehSvE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:45 2025 by rpki-client